Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: LjY4fdY25dX7Ue+PS2SMpw1isTLYIavUAl86bUDkdwE=
Subject key identifier: 35:52:12:0F:0C:CF:AD:72:FC:70:A7:33:EC:F0:54:20:70:A4:DF:4A
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 0198D5159003FAC1F11D68235D300FC4D2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 0560
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: EMsw5PnCJp9naYYFWHSYVusZPv4hjbX3G4gMDaMvf0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:90:03:fa:c1:f1:1d:68:23:5d:30:0f:c4:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=3552120f0ccfad72fc70a733ecf0542070a4df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:45:94:ce:47:d8:94:98:e0:74:bd:9e:b6:
78:94:97:4a:5d:9a:ae:10:1d:40:56:48:ce:f8:9f:
27:4b:8c:97:92:64:90:7c:9f:e5:19:17:0e:9b:a1:
d7:ba:4b:31:60:7c:7c:59:f8:6c:e9:97:49:35:af:
0c:95:f5:c7:18:62:32:a2:ad:92:ad:69:e2:7d:21:
b1:8c:04:a3:b4:50:ad:79:89:8b:e8:c0:27:b7:75:
20:3c:47:5b:5e:79:45:8c:99:00:23:f4:77:66:f4:
92:e8:88:20:f4:4a:bb:fd:57:d7:fe:c1:6e:28:fb:
98:c3:c0:62:b7:4c:a3:65:41:82:c5:2d:c7:f8:a5:
b6:8a:11:ca:86:9b:e4:d0:2d:b3:ad:70:df:8d:28:
cc:4b:ff:6f:d8:0c:5e:6a:46:76:d7:81:90:22:80:
b3:19:86:a6:25:3d:19:56:3e:12:e0:5b:c0:ce:ce:
61:8e:3e:f7:c1:66:57:e8:91:ce:25:5e:08:24:8e:
28:96:dc:a5:b9:bb:7f:47:d0:91:01:08:59:59:8b:
17:8f:1b:08:a4:ee:0b:0f:db:09:7e:57:83:88:88:
96:28:5c:9f:7f:5e:97:c7:d2:e6:8b:3a:f2:39:c8:
75:e9:69:65:15:c4:04:b9:e7:2d:45:75:bb:c8:59:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:12:0F:0C:CF:AD:72:FC:70:A7:33:EC:F0:54:20:70:A4:DF:4A
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:cd:2e:b5:7b:07:fc:96:97:b2:aa:01:16:1b:19:cc:00:
18:9e:11:53:6c:f3:e1:a5:fe:31:bb:8f:b4:87:49:1f:5a:fa:
67:c3:eb:4a:69:45:e8:02:da:eb:fa:bf:95:28:ee:53:f4:02:
35:25:17:ad:cf:22:b2:13:f9:e9:bc:ac:6e:56:ce:23:70:70:
32:a7:33:1a:05:4e:b6:ae:2b:00:f7:e0:e1:6c:59:03:f2:4c:
d2:1e:4c:a1:68:4e:41:92:df:e8:d3:f3:e8:aa:a6:12:0a:43:
4d:60:e4:1a:a4:71:81:c7:ef:4e:bd:c4:1f:ef:6d:a2:e5:8f:
c3:4b:97:f3:c2:a9:df:e0:e6:31:a9:83:38:fd:0e:ed:1b:6b:
23:7c:80:cd:d1:88:fc:71:be:9f:f2:f2:a6:07:ca:83:54:d8:
31:46:b9:5c:fc:1f:70:2a:7f:7c:57:5a:ea:20:49:1a:3a:ca:
7f:3b:f2:67:75:37:0f:c3:4b:ea:d1:34:d1:cd:95:47:7a:58:
ad:86:9e:0e:6c:76:7a:63:6d:24:fe:86:6f:48:97:f7:46:a8:
de:4a:df:c2:ff:f2:d0:d7:b4:f6:77:f0:bb:28:58:fd:7d:58:
60:8e:11:aa:df:e8:f1:0e:33:d4:0c:ef:44:4d:b1:c0:6f:99:
7a:e6:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:23 2025 by rpki-client